2104 matches found
CVE-2005-3666
Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 IKEv1 have multiple unspecified attack vectors and impacts, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of information in the original...
CVE-2005-3672
The Internet Key Exchange version 1 IKEv1 implementation in Stonesoft StoneGate Firewall before 2.6.1 allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the Stonesoft...
CVE-2005-3666
Technical details (affected implementations, exact root cause, impact, and fixes for CVE-2005-3666) are not publicly available in the provided documents. Monitor for updates as new information becomes available.
PT-2005-4426 · Cisco · Cisco Ios +2
Name of the Vulnerable Software and Affected Versions: Cisco IOS affected versions not specified Description: The issue is related to vulnerabilities in the processing of IPSec IKE messages in multiple Cisco products. These vulnerabilities were identified by the University of Oulu Secure...
Vulnerabilities in the Internet Key Exchange Xauth Implementation
Cisco Internetwork Operating System IOS Software release trains 12.2T, 12.3 and 12.3T may contain vulnerabilities in processing certain Internet Key Exchange IKE Xauth messages when configured to be an Easy VPN Server. Successful exploitation of these vulnerabilities may permit an unauthorized us...
CVE-2002-1623
The CVE-2002-1623 entry concerns the Internet Key Exchange (IKE) protocol: when using Aggressive Mode for shared secret authentication, identities are not encrypted during negotiation. This can allow remote attackers to determine valid usernames by monitoring responses before password entry or by...
CVE-2002-1623
The design of the Internet Key Exchange IKE protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may allow remote attackers to determine valid usernames by 1 monitoring responses before the password is...
NotifyLink server provides inadequate protection for cryptographic key material
Overview The NotifyLink key exchange protocol contains a vulnerability that significantly reduces the strength of cryptographic keys used to encrypt mail messages. Description Notify Technology NotifyLink Enterprise Server allows users to synchronize e-mail between a PDA and a mail server. The...
LSH lshd parse_kexinit() Function Malformed Key Exchange Message Remote DoS
The remote host is running Lysator's LSH, a version of Secure Shell SSH that is available for Unix-like platforms. This version of LSH is reportedly vulnerable to a denial of service attack. An attacker can exploit this issue by sending a malformed key exchange message. C Tenable Network Security...
CVE-2004-2678
Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2BL22 and PK3BL24, and 5.1A PK6BL24, when using IPsec/IKE Internet Key Exchange with Certificates, allows remote attackers to gain privileges via unknown attack vectors...
CVE-2004-2679
Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange IKE with a certain Vendor ID payload that causes Firewall-1 to return a response containing version and other information...
CVE-2001-0951
Windows 2000 allows remote attackers to cause a denial of service CPU consumption by flooding Internet Key Exchange IKE UDP port 500 with packets that contain a large number of dot characters...
ISS Protection Brief: Entrust Libkmp Library Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Brief August 26, 2004 Entrust LibKmp Library Buffer Overflow Summary: ISS X-Force has discovered a flaw in the Entrust LibKmp ISAKMP library. This library is used by multiple VPN vendors to facilitate IKE key exchange for...
Internet Key Exchange (IKE) Server Detection
Binary data 1106.prm...
Important: Red Hat Security Advisory: ipsec-tools security update
An updated ipsec-tools package that fixes verification of X.509 certificates in racoon is now available. IPSEC uses strong cryptography to provide both authentication and encryption services. When configured to use X.509 certificates to authenticate remote hosts, ipsec-tools versions 0.3.3 and...
CVE-2004-0710
IP Security VPN Services Module VPNSM in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers running IOS before 12.217bSXA, before 12.217dSXB, or before 12.214SY03 could allow remote attackers to cause a denial of service device crash and reload via a malformed Internet K...
Fedora Core 2 : ipsec-tools-0.2.5-4 (2004-197)
When configured to use X.509 certificates to authenticate remote hosts, ipsec-tools versions 0.3.3 and earlier will attempt to verify that host certificate, but will not abort the key exchange if the verification fails. Users of ipsec-tools should upgrade to this updated package which contains a...
CVE-2004-0710
IP Security VPN Services Module VPNSM in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers running IOS before 12.217bSXA, before 12.217dSXB, or before 12.214SY03 could allow remote attackers to cause a denial of service device crash and reload via a malformed Internet K...
security flaw
The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509...
